schemathesis 4.28.0

Release 4.28.0

on Python PyPI

🚀 Added

• Fuzz dictionary bindings for GraphQL arguments via <Type>.<field>.<argument> keys.
• Opt-in low_valid_rate warning for operations that accept few of the requests sent to them.
• A server that stops accepting connections ends the run with one Server Unavailable error.
• missing_test_data warns for GraphQL operations whose responses never carry data.
• st replay retries passing crashes up to three times and reports intermittent ones as FLAKY.
• Dynamic auth extract_from = "cookie" takes a named cookie from a Set-Cookie login response.
• schemathesis.errors.FailureGroup for catching failures raised by validate_response.
• Support for pytest 8.4.
• validate() and is_valid() on request parameters for checking values against the schema.

🐛 Fixed

• False positive negative_data_rejection for regex, uri-reference and similar string formats in fuzzing.
• False positive response_schema_conformance for HEAD responses that declare a body.
• False positive 'negative_data_rejection' for unknown query parameters next to boolean ones.
• Send examples that different parameters declare under the same name together.
• Send the value, not the name, for examples maps inside a parameter or body schema.
• False positive GraphQL server errors for resolver rejections labelled in error extensions.
• Report OpenAPI links to missing operations or unresolvable references as invalid links.
• Complete partial request body examples declared under the examples keyword.
• Protocol-relative $ref (//host/schema.json) failing to resolve for schemas loaded from a file.
• XML serialization error for scalar bodies under a root element with a namespace prefix.
• Generate cookie values from RFC 6265 cookie-octets only.
• Send a JSON string, not raw bytes, for top-level format: binary JSON bodies.

🔧 Changed

• Name the conflicting constraints and where they sit when test data cannot be generated.
• Report GraphQL non-nullable fields resolving to null as a GraphQL schema violation, severity high.
• missing_test_data names the operation that appears to supply the data an unlinked operation needs, or reports that none does.